System and method for simultaneous location tracking of multiple wireless terminals

ABSTRACT

A location-tracking system that includes multiple detector units that are deployed in a region of interest. The detector units receive uplink signals from wireless terminals that are active in the region, and measure the strengths of the received uplink signals. The system computes the locations of the terminals based on the measured signal strengths and the known locations of the detector units. The location-tracking system receives and analyzes downlink signals from one or more of the base stations of the wireless network. The detector unit uses the downlink signal to recover and synchronize to the timing of the wireless network&#39;s air-interface. Based on the extracted uplink allocations, and having synchronized with the air-interface, the system is able to distinguish between the uplink signal components originating from each terminal, and thus compute the location of each terminal.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No.15/084,406, filed on Mar. 29, 2016, entitled “SYSTEM AND METHOD FORSIMULTANEOUS LOCATION TRACKING OF MULTIPLE WIRELESS TERMINALS,” thecontents of which are hereby incorporated by reference in theirentirety.

FIELD OF THE DISCLOSURE

The present disclosure relates generally to wireless network monitoring,and particularly to methods and systems for tracking locations ofwireless terminals.

SUMMARY OF THE DISCLOSURE

An embodiment that is described herein provides a method includingreceiving, using multiple detector units, uplink signals from multiplewireless communication terminals that communicate simultaneously withone or more base stations of a wireless network. Time-frequency uplinkallocations assigned to the respective wireless terminals are extractedfrom a downlink signal of at least one of the base stations. Respectivelocations of the wireless terminals are computed based on the uplinksignals received by the detector units and on the extracted uplinkallocations.

In some embodiments, extracting the uplink allocations includesreceiving the downlink signal in at least one of the detector units. Inan embodiment, extracting the uplink allocations includes receiving thedownlink signal in a given detector unit, synchronizing the uplinksignals received in the given detector unit with the downlink signalreceived in the given detector unit, and synchronizing the multipledetector units with one another. In another embodiment, extracting theuplink allocations includes receiving the downlink signal in eachdetector unit, and synchronizing the uplink signals received in eachdetector unit with the downlink signal received in that detector unit.

In some embodiments, computing the locations includes distinguishing,using the uplink allocations, between at least first and secondcomponents of the received uplink signals that originate from respectivefirst and second wireless terminals, and computing first and secondlocations of the first and second wireless terminals using the first andsecond components, respectively. In an embodiment, the first and secondcomponents overlap in time. Additionally or alternatively, the first andsecond components overlap in frequency.

In another embodiment, computing the locations includes measuringrespective signal strengths with which a component of the uplink signal,originating from a given wireless terminal, is received at the detectorunits, and computing a location of the given wireless terminal based onthe signal strengths. In yet another embodiment, the method includessoliciting one or more of the wireless communication terminals totransmit the uplink signals, by transmitting one or more silent messagesto the wireless communication terminals.

There is additionally provided, in accordance with an embodiment that isdescribed herein, a system including multiple detector units and one ormore processors. The multiple detector units are configured to receiveuplink signals from multiple wireless communication terminals thatcommunicate simultaneously with one or more base stations of a wirelessnetwork. The one or more processors are configured to extract from adownlink signal of at least one of the base stations time-frequencyuplink allocations assigned to the respective wireless terminals, and tocompute respective locations of the wireless terminals based on theuplink signals received by the detector units and on the extracteduplink allocations.

The present disclosure will be more fully understood from the followingdetailed description of the embodiments thereof, taken together with thedrawings in which:

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram that schematically illustrates a system forsimultaneous location-tracking of wireless communication terminals, inaccordance with an embodiment that is described herein; and

FIG. 2 is a flow chart that schematically illustrates a method forsimultaneous location-tracking of wireless communication terminals, inaccordance with an embodiment that is described herein.

DETAILED DESCRIPTION OF EMBODIMENTS Overview

Embodiments that are described herein provide improved methods andsystems for estimating the locations of wireless communication terminalsthat communicate with a wireless network. In the disclosed embodiments,a location-tracking system comprises multiple detector units that aredeployed in a region of interest. The detector units receive uplinksignals from wireless terminals that are active in the region, andmeasure the strengths of the received uplink signals. The systemcomputes the locations of the terminals based on the measured signalstrengths and the known locations of the detector units.

When multiple terminals are active simultaneously, however, simplesignal-strength measurements are practically useless for locationestimation. Depending on the air-interface used by the wireless network,each terminal is typically allocated certain time-frequency bins on theuplink, and uses these allocations for transmitting. Without knowledgeof the actual uplink allocations, it is all but impossible todistinguish between the individual uplink transmissions of differentterminals in order to track their locations.

In some embodiments, the location-tracking system overcomes the aboveproblem by receiving and analyzing downlink signals from one or more ofthe base stations of the wireless network. In an example embodiment, oneof the detector units comprises a downlink receiver that receives adownlink signal from a base station. The detector unit decodes thedownlink signal and extracts time-frequency uplink allocations that aresignaled to the terminals. In addition, the detector unit uses thedownlink signal to recover and synchronize to the timing of the wirelessnetwork's air-interface. (The detector units are typically synchronizedto one another, e.g., using GPS). Based on the extracted uplinkallocations, and having synchronized with the air-interface, the systemis able to distinguish between the uplink signal components originatingfrom each terminal, and thus compute the location of each terminal.

In an alternative embodiment, each of the detector units is capable ofreceiving both uplink and downlink signals. The detector units spendmost of their time measuring the uplink, but also switch at knownintervals to measure the downlink and keep synchronized to it. In thismanner, synchronization between the detector units is not required.

In some embodiments, the system solicits multiple terminals to transmitand be intercepted by the detector units. For example, the system maycomprise a downlink transmitter that transmits silent calls or silentSMS messages to multiple terminals simultaneously. The terminals respondto the silent calls or SMS messages by transmitting on the uplink, andthe uplink transmissions are subsequently detected and located by thedetector units using the disclosed techniques. This feature is useful,for example, when the terminals are not sufficiently active.

The methods and systems described herein provide an efficient andunobtrusive means for tracking the locations of wireless terminals andtheir users. The disclosed techniques are particularly useful whenmultiple terminals are active simultaneously, especially when theair-interface is complex and uses allocations that overlap in time andfrequency.

System Description

FIG. 1 is a block diagram that schematically illustrates a system 20 forlocation-tracking of wireless communication terminals 24 thatcommunicate with a wireless network 30, in accordance with an embodimentthat is described herein. System 20 may be used, for example, by lawenforcement agencies for tracking the locations of users 28 that operateterminals 24.

Terminals 24 may comprise, for example, cellular phones, smartphones,wireless-enabled mobile computing devices, or any other suitable type ofterminals. Wireless network 30 comprises base stations 32 and a corenetwork 36. Terminals 24 communicate with network 30 by transmittinguplink signals to base stations 32 and receiving downlink signals fromthe base stations. Network may operate in accordance with any suitablecommunication protocol, such as Global System for Mobile communications(GSM), Universal Mobile Telecommunications System (UMTS) and Long-TermEvolution (LTE).

In some embodiments, location-tracking system 20 comprises multipledetector units 40 (referred to as detectors for brevity) and acontroller 44. Detectors 40 are typically placed at different locationsin a region of interest. Detectors 40 and controller 44 communicate withone another using any suitable communication means. The figure showsthree detectors by way of example, but system 20 may generally compriseany suitable number of detectors 40.

In the present example, each detector 40 comprises an uplink receiver(UL RX) 52, a Global Positioning System (GPS) receiver 56, and aprocessor 60. UL RX 52 is configured to receive uplink signals fromterminals 24. GPS receiver 56 measures the location of the detector andprovides an accurate time-base for time-synchronizing detectors 40 withone another. Processor 60 communicates with controller 44 and possiblycarries out some of the location measurement tasks jointly with thecontroller.

In the disclosed embodiments, at least one of detectors 40 comprises adownlink receiver (DL RX) 48 for receiving a downlink signal from atleast one of base stations 32. The received downlink signal is used bysystem 20 to recover the timing of the air-interface of network 30, andto extract the time-frequency uplink allocations assigned to the variousterminals 24. These functions, and their use in location tracking, areexplained in detail below.

In alternative embodiments, each detector 40 comprises a respective DLRX 48 and a respective UL RX 52, so that each detector 40 is capable ofreceiving both uplink and downlink signals. In an embodiment, processor60 in each detector controls DL RX 48 and UL RX 52, and in particularswitches between the two receivers. Typically, each detector 40 spendsmost of the time receiving uplink signals from terminals 24 using UL RX52. At certain known time intervals, processor 60 switches to DL RX 48,and receives and synchronizes to the downlink timing. When using thistechnique, each detector 40 recovers and synchronizes separately to thetiming of the air-interface of network 30. As such, there is no need tosynchronize detectors 40 with one another.

The system configurations shown in FIG. 1 and described above areexample configurations that are chosen purely for the sake of conceptualclarity. In alternative embodiments, any other suitable systemconfigurations can be used. For example, any of detectors 40, notnecessarily one detector or all detectors, may comprise DL RX 48. Asanother example, synchronization among the detectors, and measurement ofthe detector locations, may be performed using any suitable means, notnecessarily using GPS receivers. As yet another example, the functionsof controller 44 may be performed by one of processors 60, or jointly bytwo or more of the processors.

Certain elements of system 20 can be implemented using hardware, such asusing one or more Application-Specific Integrated Circuits (ASICs),Field-Programmable Gate Arrays (FPGAs) or other device types.Additionally or alternatively, certain elements of system 20 can beimplemented using software, or using a combination of hardware andsoftware elements. In some embodiments, controller 44 and/or processors60 in the detector units comprise general-purpose processors, which areprogrammed in software to carry out the functions described herein. Thesoftware may be downloaded to the processors in electronic form, over anetwork, for example, or it may, alternatively or additionally, beprovided and/or stored on non-transitory tangible media, such asmagnetic, optical, or electronic memory.

Location-Tracking of Multiple Active Terminals

Terminals 24 communicate with wireless network 30 by transmitting uplinksignals to base stations 32 and receiving downlink signals to the basestations. Typically, network 30 allocates uplink time-frequencyresources to each terminal 24, and each terminal uses its allocatedresources for transmitting uplink signals. Each base station 32typically notifies its served terminals 24 of their uplink allocationsby sending control messages over the downlink. The allocations aretypically adaptive and change over time in accordance with the trafficneeds of the various terminals.

The specific types of uplink allocations, and the signaling scheme usedfor reporting the allocations on the downlink, depends on thecommunication protocol used by wireless network 30. In GSM, for example,the allocations comprise time slots that are assigned in uplink timeframes. As another example, in LTE the allocations comprisetime-frequency resource elements (REs) assigned in uplink sub-frames.Generally, the uplink resources assigned to different terminals mayoverlap in time and/or in frequency.

As can be seen from the description above, when multiple terminals 24are active, the uplink signals received at detectors 40 comprise asuperposition of signals from various terminals 24. As such, simplesignal-strength measurements of the uplink signals, without consideringthe actual uplink allocations of each terminal, are useless for locationmeasurements.

In some embodiments, system 20 extracts the information regarding theactual uplink allocations from downlink signals of one or more of basestations 32. Typically, at least one of detectors 40 receives a downlinksignal using its DL RX 48. Processor 60 of this detector decodescontrol-channel messages conveyed by the downlink signal, and extractsthe uplink allocations from the control-channel messages.

Based on the uplink allocations, processors 60 are able to distinguishbetween the uplink signal components originating from differentindividual terminals, even though multiple terminals are activesimultaneously.

In an example embodiment, processor 60 of each detector 40 calculatesthe signal strength of the received uplink signal per time and/orfrequency bin, and forwards this information to controller 44.Controller 44 receives the uplink signal strength reports (per timeand/or frequency bin) from the different detectors, and also receivesthe extracted uplink allocations.

Based on this information, controller 44 is able to determine the signalstrength with which the uplink signal of a particular terminal wasreceived at the different detectors 40. The controller then translatesthese signal strength measurements into location coordinates of thatterminal. This process may be performed for every terminal whose uplinkallocation is available, or only for one or more selected terminals ofinterest.

In order to distinguish correctly between uplink signal componentsoriginating from different terminals 24, detectors 40 should besynchronized with the timing of the air-interface of wireless network30. In some embodiments, this synchronization is achieved bysynchronizing the timing of detectors 40 to the downlink signal receivedin DL RX 48 of one or more of the detectors. In some embodiments, one ofdetectors 40 synchronizes to the air-interface of network 30, and thedetectors also synchronize with one another, for example using GPSreceivers 56. Controller 44 may also comprise a GPS receiver forsynchronizing to this common time base. In other embodiments, eachdetector 40 synchronizes separately to the air-interface of wirelessnetwork 30.

As noted above, the set of uplink signal-strength values, as receivedfrom a given terminal by the multiple detectors, is indicative of thelocation of the terminal. Controller 44 may translate the set ofsignal-strength values into a location coordinate of the terminal invarious ways. For example, controller 44 may hold a predefined databasethat maps sets of signal-strength values into respective coordinates.Such a database may be obtained, for example, by propagation modeling orby performing drive-tests over the region of interest.

FIG. 2 is a flow chart that schematically illustrates a method forsimultaneous location-tracking of wireless communication terminals, inaccordance with an embodiment that is described herein. The methodrefers to the system configuration of FIG. 1, but can be implemented ina similar manner using any other suitable configuration.

The method begins with detectors 40 receiving uplink signals originatingfrom multiple terminals 24, at an uplink reception step 80. Eachdetector 40 measures the received signal strength per time-frequencybin, at a signal-strength measurement step 84. The measuredsignal-strength values are sent from detectors 40 to controller 44.

Typically at the same time, one of detectors 40 receives a downlinksignal from one of base stations 32, at a downlink reception step 88.The detector recovers the timing of the air-interface of wirelessnetwork 30 from the received downlink signal, at a timing recovery step92. The recovered timing enables system 20 to synchronize its own timingwith the air-interface of network 30. At an allocation extraction step96, the detector extracts the time and/or frequency uplink allocationssignaled over the downlink signal.

At a location computation step 100, controller 44 computes the locationcoordinates of the various terminals 24 based on the extractedallocations (output of step 96) and the measured signal strengths pertime-frequency bin (output of step 84). The method then loops back tosteps 80 and 88 above, to continue receiving the uplink and downlinksignals and update the location computations.

Controller 44 may use the location coordinates of terminals 24 in anysuitable way. For example, the controller may output the locationcoordinates to an operator or to some other system, store thecoordinates for later use, or take any other suitable action.

The embodiments described herein refer to a particular partitioning offunctions between detectors 40 and controller 44, and in particularbetween processors 60 of the detectors and controller 44. Thispartitioning, however, is depicted purely for the sake of conceptualclarity. In alternative embodiments, any other division of functionsamong the various elements of system 20 can be used. In the presentcontext, controller 44 and processors 60 are referred to collectively asone or more processors that carry out the disclosed techniques.

In some embodiments, system 20 further comprises a transmitter thatsolicits multiple terminals 24 to transmit, in order to cause thetransmissions to be intercepted by detector units 40. For example, thetransmitter may transmit silent calls or silent SMS messages (alsoreferred to as “stealth SMS” or “stealth ping”) to multiple terminalssimultaneously. Such messages are typically unnoticeable by users 28.Terminals 24 respond to the silent calls or SMS messages by transmittingon the uplink, and the uplink transmissions are subsequently detectedand located by detector units 40 using the techniques described above.

Although the embodiments described herein mainly address cellularnetworks, the principles of the present disclosure can also be used forlocating other types of communication terminals such as WirelessLocal-Area Network (WLAN) devices.

It will thus be appreciated that the embodiments described above arecited by way of example, and that the present disclosure is not limitedto what has been particularly shown and described hereinabove. Rather,the scope of the present disclosure includes both combinations andsub-combinations of the various features described hereinabove, as wellas variations and modifications thereof which would occur to personsskilled in the art upon reading the foregoing description and which arenot disclosed in the prior art. Documents incorporated by reference inthe present patent application are to be considered an integral part ofthe application except that to the extent any terms are defined in theseincorporated documents in a manner that conflicts with the definitionsmade explicitly or implicitly in the present specification, only thedefinitions in the present specification should be considered.

1. A method performed by a system comprising multiple detector units anda controller, each of the multiple detector units comprising an uplinkreceiver, a downlink receiver, and a processor, the method comprising:each detector unit of the multiple detector units: intercepting, by theuplink receiver, uplink signals from multiple wireless communicationterminals that communicate with one or more base stations of a wirelessnetwork; intercepting, by the downlink receiver, a downlink signal thathas been sent from at least one of the base stations of the wirelessnetwork to the multiple wireless communication terminals; andextracting, by the processor, from the intercepted downlink signal,time-frequency uplink allocations assigned to the respective wirelesscommunication terminals; and computing respective location coordinatesof the wireless communication terminals based on the uplink signalsintercepted by the detector units and on the time-frequency uplinkallocations.
 2. The method according to claim 1, wherein the computingof the respective location coordinates is performed by a processor of atleast one of the detector units or by the controller, wherein thecontroller is external to the detector units.
 3. The method according toclaim 1, wherein a given detector unit further comprises a GlobalPositioning System (GPS) receiver, and wherein extracting the uplinkallocations comprises: measuring, by the GPS receiver, the location ofthe given detector; providing, by the GPS receiver, a time-base fortime-synchronizing the multiple detectors with one another;synchronizing the uplink signals intercepted by the given detector unitwith the downlink signal intercepted by the given detector unit; andsynchronizing the multiple detector units with one another based on thetime-base provided by the GPS receiver.
 4. The method according to claim1, wherein extracting the uplink allocations comprises synchronizing theuplink signals intercepted by each detector unit with the downlinksignal intercepted by that detector unit.
 5. The method according toclaim 1, wherein computing the location coordinates comprisesdistinguishing, using the uplink allocations, between at least first andsecond components of the intercepted uplink signals that originate fromrespective first and second wireless terminals, and computing first andsecond location coordinates of the first and second wireless terminalsusing the first and second components, respectively.
 6. The methodaccording to claim 5, wherein the first and second components overlap intime.
 7. The method according to claim 5, wherein the first and secondcomponents overlap in frequency.
 8. The method according to claim 1,wherein computing the location coordinates comprises measuringrespective signal strengths with which a component of the uplink signal,originating from a given wireless terminal, is intercepted by thedetector units, and computing a location coordinate of the givenwireless terminal based on the signal strengths.
 9. The method accordingto claim 1, further comprising soliciting one or more of the wirelesscommunication terminals to transmit the uplink signals, by transmittingone or more silent messages to the wireless communication terminals. 10.The method according to claim 1, wherein the system is distinct from thewireless network.
 11. A system comprising: multiple detector units,wherein each of the multiple detector units comprises: an uplinkreceiver, which is configured to intercept uplink signals from multiplewireless communication terminals that communicate with one or more basestations of a wireless network; a downlink receiver, which is configuredto intercept a downlink signal that has been sent from at least one ofthe base stations of the wireless network to the multiple wirelesscommunication terminals; and a processor, which is configured to extractfrom the received downlink signal time-frequency uplink allocationsassigned to the respective wireless terminals; and a controller, whereinrespective location coordinates of the wireless communication terminalsare computed based on the uplink signals and on the time-frequencyuplink allocations.
 12. The system according to claim 11, whereincomputing the respective location coordinates is performed by aprocessor of at least one of the detector units or by the controller,wherein the controller is external to the detector units.
 13. The systemaccording to claim 11, wherein a given detector unit further comprises aGlobal Positioning System (GPS) receiver that is configured to measurethe location of the given detector and to provide a time-base fortime-synchronizing the multiple detectors with one another, and whereinthe processor is configured to synchronize the uplink signalsintercepted by the given detector unit with the downlink signalintercepted by the given detector unit, and to synchronize the multipledetector units with one another based on the time-base provided by theGPS receiver.
 14. The system according to claim 11, wherein theprocessor is configured to synchronize the uplink signals intercepted byeach detector unit with the downlink signal intercepted by that detectorunit.
 15. The system according to claim 11, wherein the processors areconfigured to distinguish, using the uplink allocations, between atleast first and second components of the intercepted uplink signals thatoriginate from respective first and second wireless terminals, and tocompute first and second location coordinates of the first and secondwireless terminals using the first and second components, respectively.16. The system according to claim 15, wherein the first and secondcomponents overlap in time.
 17. The system according to claim 15,wherein the first and second components overlap in frequency.
 18. Thesystem according to claim 11, wherein the processors of the detectorunits are configured to measure respective signal strengths with which acomponent of the uplink signal, originating from a given wirelessterminal, is intercepted by the detector units, and wherein theprocessors are configured to compute a location coordinate of the givenwireless terminal based on the signal strengths.
 19. The systemaccording to claim 11, further comprising a transmitter that isconfigured to solicit one or more of the wireless communicationterminals to transmit the uplink signals, by transmitting one or moresilent messages to the wireless communication terminals.
 20. The systemaccording to claim 11, wherein the system is distinct from the wirelessnetwork.